OSVDB ID: 43109

Title: SCO UnixWare pkgadd Traversal Local Privilege Escalation

Info

Disclosure

Feb 27, 2008

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Feb 27, 2008

Description

SCO UnixWare pkgadd contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when a malicious attacker exploits 'pkgadd'. This flaw may lead to a loss of Confidentiality.

Classification

Impact: Loss of Confidentiality
Solution: Patch / RCS
Exploit: Exploit Public, Exploit Private
Disclosure: Vendor Verified

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, vendor has released a patch to address this vulnerability.

Products

SCO Group, Inc.

UnixWare

7.1.4

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/43109